Hacker - How to identify Time and Date DNS entry change

On a Microsoft domain if you want to understand when a DNS entry was changed you need to:

  1. Logon on DC
  2. ADSI Edit --> Default naming context
  3. You must go to CN=System, CN=MicrosoftDNS and search about relative entry
  4. Right Click --> Properties --> searching for Creation date and last modify

in case you want to enable DNS audit log you can read this article:

720check